MAL-2025-155586 Malicious code in hafiz-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540271e5dd080ff2d555a79bebde1b0969fd136fd9681b1f3f0a23fe250ab7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163899 Malicious code in nustar-miuyu-nasfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a111fc7872e04c2da607fa294cca90dc5536535481ecfa87b0d6f356341f382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151565 Malicious code in abu-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ead33b3b7501a651395f992b10c77febddf2e8b3d31e47a17f5e8553e1094eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168345 Malicious code in tealove-lady38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8fb9a62c7ecfe6c7a912dd33c9d187880a6ebb7acc7c8c908b21fe7c09c90c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155553 Malicious code in gurs-nurazssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0755738e42217653dfb9bfc9587e07c31837775e3f991e176b69f3d9faa70c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153303 Malicious code in avminh-afagais-ifafofda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e7ad4035f5b5abaf085f2a61799f36aaacd1bf625b3588de7d38806147a32e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158709 Malicious code in lookingan-namakita92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9642ffccafdc9b4de1e05a95dcc518fe9f2d9510cec45a3bf22c42414ab806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156351 Malicious code in inagi-vumaf-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbddabf60f9a6a7649de37a448d2748ba275d89d8ee5d98cee09b8da506939e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166646 Malicious code in syahmuda-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d72da757c703bb095785bbdd443a758181476286c3670ef9203106433787221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151034 Malicious code in @miptaa02/woh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08820a33461284585bc6618071e21ec266f93156f83bd507d3cae8be8d76f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161439 Malicious code in nabuf-otiganaigoaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff06047c326b1cdda4bea1afdc3d9991c1152e9f51b7adf18b063577bdcc5d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167123 Malicious code in teagood-manaki56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d8ee2b33f78036f16ac6b9427499fca16e39b205072fb62d0908126ffea3b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158158 Malicious code in lina-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d79889f185e7de36e6977bec498b9dc1d978127a6202baeb04dac34cd99dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167534 Malicious code in teagood-nalikoli124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6281141b323ef34de15143152d5ecf6185f8b035dc770c5e3e041184b3b2829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155798 Malicious code in huda-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3438999d078904b4caf40e3aee505956bb7d3226bd454b4592b33fc6178a8099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150853 Malicious code in @miptaa02/mura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5150ddae4a6b14b717f2ee16b2fa91dbed884418607fba17996bdeb3eb5be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153230 Malicious code in avminah-fagnias-ifig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c844ceadbd62a9c0bc037bd6fe3064ae153b4d315c0087b9cb40fe06daa35e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151806 Malicious code in aiboa-mioliupe-agatia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3da3f62b97a4d41813f8a4e8efe548f4f1ecfb5386cc6f93fcfd0aa9cf0e2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155546 Malicious code in gurs-nura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4836015f28b6b331a2143c5817679dc0ced15a2edcd8d50d10f83f9085a85f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157851 Malicious code in kuinsu-uyilu-vin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7874b7479262b21bf3ce1a134bd940a4b8903925cf19d12fabdf0edffdaa6d2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...